Re: Does HAProxy 1.8.0 need new param vs 1.7.9

2017-11-27 Thread Willy Tarreau
Hi Hemant, On Mon, Nov 27, 2017 at 12:11:25PM -0600, Coscend@Coscend wrote: > Dear HAProxy community, > > We have been successfully loading Stats page and other applications via > HAProxy 1.7.9. We successfully compiled, installed and ran 1.8.0 as a > systemd service. However, with 1.8.0, we

Re: [1.8] tune.ssl.cachesize

2017-11-27 Thread Willy Tarreau
Hi Maciej, On Mon, Nov 27, 2017 at 09:15:22AM +0100, Maciej Zdeb wrote: > Hi, > > Thank you for your hard work on HAProxy 1.8 - great job! > > I tried to update haproxy from 1.7 on our r machine to 1.8 version > however stumbled upon problem with tune.ssl.cachesize directive. > > In 1.7.3 with

Re: [BUG] haproxy 1.8-last/master-worker/peers

2017-11-27 Thread Willy Tarreau
Hi Manu, On Mon, Nov 27, 2017 at 06:21:50PM +0100, Emmanuel Hocdet wrote: > Hi Willy, > > > Le 18 nov. 2017 à 12:28, Willy Tarreau a écrit : > > > > Hi Manu, > > > > On Fri, Nov 17, 2017 at 05:14:11PM +0100, Emmanuel Hocdet wrote: > >> In master-worker mode with peers, old worker

Re: possible use-after-free on v1.9-dev0-3-ge78915a4

2017-11-27 Thread Willy Tarreau
Hello Ricardo, On Mon, Nov 27, 2017 at 04:33:45PM -0200, Ricardo Nabinger Sanchez wrote: > Hello, > > While compile-testing 1.9-dev with Clang/LLVM analyzer, it found the > following (possible) scenario: > > 1- in function cfg_cache_postparser(), when entering the nested loop in > line 914,

Re: haproxy-1.8.0, sending a email-alert causes 100% cpu usage, FreeBSD 11.1

2017-11-27 Thread Willy Tarreau
Hi Pieter, On Mon, Nov 27, 2017 at 09:43:52PM +0100, PiBa-NL wrote: > Hi List, > > I thought i 'reasonably' tested some of 1.8.0's options. > Today i put it into 'production' on my secondary cluster node and notice it > takes 100% cpu... G.. bad. This sounds like another case of recursive

[PR] Fix typo

2017-11-27 Thread PR Bot
Dear list! Author: CJ Ting Number of patches: 1 This is an automated relay of the Github pull request: Fix typo Patch title(s): Fix typo Link: https://github.com/haproxy/haproxy/pull/81 Edit locally: wget https://github.com/haproxy/haproxy/pull/81.patch

Re[2]: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Aleksandar Lazic
Hi Willy. -- Originalnachricht -- Von: "Willy Tarreau" An: "Aleksandar Lazic" Cc: haproxy@formilux.org Gesendet: 27.11.2017 23:54:31 Betreff: Re: [ANNOUNCE] haproxy-1.8.0 Hi Aleks, On Mon, Nov 27, 2017 at 09:18:35PM +, Aleksandar Lazic wrote: >

Re: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Willy Tarreau
Hi Aleks, On Mon, Nov 27, 2017 at 09:18:35PM +, Aleksandar Lazic wrote: > > I'm pleased to announce that haproxy 1.8.0 is now officially released! > Amazing ;-) So after 15 years working on this project you still manage to be amazed, I'm impressed ;-) > As usual the docker image is also

Re: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Aleksandar Lazic
Hi. -- Originalnachricht -- Von: "Willy Tarreau" An: haproxy@formilux.org Gesendet: 26.11.2017 19:57:35 Betreff: [ANNOUNCE] haproxy-1.8.0 Hi all, After one year of intense development and almost one month of debugging, polishing, and cross-review work trying to prevent

haproxy-1.8.0, sending a email-alert causes 100% cpu usage, FreeBSD 11.1

2017-11-27 Thread PiBa-NL
Hi List, I thought i 'reasonably' tested some of 1.8.0's options. Today i put it into 'production' on my secondary cluster node and notice it takes 100% cpu... I guess i should have tried such a thing last week. My regular config with 10 frontends and total 13 servers seems to startup fine

RE: Does HAProxy 1.8.0 need new param vs 1.7.9

2017-11-27 Thread Coscend@HAProxy
Further, we have added the following new parameters in the configuration before testing 1.8.0 [{I} -Baptiste Assman's article]. Still the pages / applications are not accessible via 1.8.0. What obvious thing could we be missing with 1.8.0 installation/configuration vs. 1.7.9? Your vectors to

RE: HAProxy 1.7.9 Not Capturing Application Session Cookie

2017-11-27 Thread Coscend@HAProxy
Hello Moemen, Thank you and very thoughtful of you to educate us on how HAProxy handles Websockets and logs cookies. Guidance such as these have helped us grow from a rank startup to offer SLA-based healthcare services to disadvantaged remote areas (where there are no hospitals/clinics)

Re: HAProxy 1.7.9 Not Capturing Application Session Cookie

2017-11-27 Thread Moemen MHEDHBI
Hi Hemant, When using websocket, HAProxy will switch to tunnel mode whenever it detects the Connection: Upgrade header. Tunnel mode means that only the first request and response are processed and logged and everything else will be forwarded with no analysis, I think this is what happens with

[PATCH]: BUILD/MINOR : TLS support check

2017-11-27 Thread David CARLIER
Hi, I m not sure this patch will be accepted and I ll understand ... this patch just check thread local storage support at compile time. I give more explanations in the commit message. Thanks. Kind regards. 0001-BUILD-MINOR-haproxy-check-TLS-support-at-compile-tim.patch Description: Binary

possible use-after-free on v1.9-dev0-3-ge78915a4

2017-11-27 Thread Ricardo Nabinger Sanchez
Hello, While compile-testing 1.9-dev with Clang/LLVM analyzer, it found the following (possible) scenario: 1- in function cfg_cache_postparser(), when entering the nested loop in line 914, cache_ptr is free()ed and redefined to cache (line 918): 914

Does HAProxy 1.8.0 need new param vs 1.7.9

2017-11-27 Thread Coscend@Coscend
Dear HAProxy community, We have been successfully loading Stats page and other applications via HAProxy 1.7.9. We successfully compiled, installed and ran 1.8.0 as a systemd service. However, with 1.8.0, we are unable to access the same stats page or any other application. We are using the

Re: [BUG] haproxy 1.8-last/master-worker/peers

2017-11-27 Thread Emmanuel Hocdet
Hi Willy, > Le 18 nov. 2017 à 12:28, Willy Tarreau a écrit : > > Hi Manu, > > On Fri, Nov 17, 2017 at 05:14:11PM +0100, Emmanuel Hocdet wrote: >> In master-worker mode with peers, old worker never died after a reload (kill >> -USR2). >> >> Tested without traffic, with/without

Re: [PATCH] BUG/MINOR: ssl: fix CO_FL_EARLY_DATA removal with http mode

2017-11-27 Thread Emmanuel Hocdet
> Le 27 nov. 2017 à 17:52, Olivier Houchard a écrit : > > Hi Emmanuel, > > On Mon, Nov 27, 2017 at 05:17:54PM +0100, Emmanuel Hocdet wrote: >> >> Hi, >> >> This patch fix CO_FL_EARLY_DATA removal to have correct ssl_fc_has_early >> reporting. It work for 'mode http'.

Re: [PATCH] BUG/MINOR: ssl: fix CO_FL_EARLY_DATA removal with http mode

2017-11-27 Thread Olivier Houchard
Hi Emmanuel, On Mon, Nov 27, 2017 at 05:17:54PM +0100, Emmanuel Hocdet wrote: > > Hi, > > This patch fix CO_FL_EARLY_DATA removal to have correct ssl_fc_has_early > reporting. It work for 'mode http'. > > It does not fix ssl_fc_has_early for 'mode tcp'. In this mode CO_FL_EARLY_DATA > should

[PATCH] BUG/MINOR: ssl: fix CO_FL_EARLY_DATA removal with http mode

2017-11-27 Thread Emmanuel Hocdet
Hi, This patch fix CO_FL_EARLY_DATA removal to have correct ssl_fc_has_early reporting. It work for 'mode http'. It does not fix ssl_fc_has_early for 'mode tcp'. In this mode CO_FL_EARLY_DATA should not be removed if early data was accepted. It is possible to check MODE_TCP in mux_pt_recv? Or

Re: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Alex Evonosky
Congratulations! On Mon, Nov 27, 2017 at 8:41 AM, Arnall wrote: > Le 26/11/2017 à 19:57, Willy Tarreau a écrit : > >> Hi all, >> >> After one year of intense development and almost one month of debugging, >> polishing, and cross-review work trying to prevent our respective

Link Question

2017-11-27 Thread Jack Russell
Hi, I am interested in having a link on your website much like others have on your site here; http://hnpaper.forge.partlab.io/u/flibble Please could you let me know the costs for this? Many Thanks, Jack Russell

Re: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Arnall
Le 26/11/2017 à 19:57, Willy Tarreau a écrit : Hi all, After one year of intense development and almost one month of debugging, polishing, and cross-review work trying to prevent our respective coworkers from winning the first bug award, I'm pleased to announce that haproxy 1.8.0 is now

Re: [PATCH]: BUILD : deviceatlas allow MT support

2017-11-27 Thread Willy TARREAU
On Mon, Nov 27, 2017 at 12:53:27PM +, David Carlier wrote: > Following up the 1.8 release, deviceatlas being MT safe, we enable this new > Haproxy feature from this module. > > Needs to be backported to 1.8 branch. Thanks very much for testing David, now merged in master an 1.8. Willy

[PATCH]: BUILD : deviceatlas allow MT support

2017-11-27 Thread David Carlier
Hi, Following up the 1.8 release, deviceatlas being MT safe, we enable this new Haproxy feature from this module. Needs to be backported to 1.8 branch. Thanks in advance. Regards. From b2e649193e5707244638122d3df04e1224bd060d Mon Sep 17 00:00:00 2001 From: David Carlier

Re: [ANNOUNCE] haproxy-1.8.0

2017-11-27 Thread Pavlos Parissis
On 26/11/2017 07:57 μμ, Willy Tarreau wrote: > Hi all, > > After one year of intense development and almost one month of debugging, > polishing, and cross-review work trying to prevent our respective coworkers > from winning the first bug award, I'm pleased to announce that haproxy 1.8.0 > is now

Re: [docs] about master-worker mode

2017-11-27 Thread William Lallemand
Hi, On Mon, Nov 27, 2017 at 06:58:06AM -0200, Joao Morais wrote: > > Hi, from nbproc doc[1]: "This requires the 'daemon' mode”, but this is also > the way to start more than one worker on master-worker mode, right? > You can have several workers with the master-worker in foreground mode, the

[docs] about master-worker mode

2017-11-27 Thread Joao Morais
Hi, from nbproc doc[1]: "This requires the 'daemon' mode”, but this is also the way to start more than one worker on master-worker mode, right? Still on the same doc: "USING MULTIPLE PROCESSES IS HARDER TO DEBUG AND IS REALLY DISCOURAGED”, is this still valid on master-worker? Both "harder to

Placement On cbsinteractive.com betthelines.com

2017-11-27 Thread ads
Hi, Greetings! ​​ This is Shweta Dubey Freelancer services provider. Current working for a​ ​client who is interested in buying paid advertising articles with links on​ ​good finance, Forex, casino, gambling, sports betting sites (if you allow), news and other relevant sites. So, if you are

[1.8] tune.ssl.cachesize

2017-11-27 Thread Maciej Zdeb
Hi, Thank you for your hard work on HAProxy 1.8 - great job! I tried to update haproxy from 1.7 on our r machine to 1.8 version however stumbled upon problem with tune.ssl.cachesize directive. In 1.7.3 with tune.ssl.cachesize = 1000: ps aux | grep haproxy USER PID %CPU %MEMVSZ